CVE-2023-2552

概要

参考情報

• unilogies/bumsys commit 86e29dd · Patch
• huntr.dev/bounties/ab0b4655-f57a-4113-849b-2237eeb75b32 · Exploit

bumsys のその他の脆弱性

• CVE-2023-2832高 7.2 SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.
• CVE-2023-2554高 7.2External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.
• CVE-2023-2553中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to 2.2.0.
• CVE-2023-2551高 8.8PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.
• CVE-2023-1362中 6.1Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.